weavatrix 0.2.8 → 0.2.9

package/docs/releases/v0.2.8.md

@@ -1,82 +0,0 @@
-# Weavatrix 0.2.8
-
-## Trust before surface area
-
-0.2.8 is a correctness release. It does not add another MCP tool. It fixes false positives and
-evidence hand-off failures found while running 0.2.7 against current JavaScript, TypeScript, Python,
-and Rust repositories.
-
-## Dead-code liveness
-
-- A production declaration is no longer classified as `test-only` merely because the same identifier
-  appears in tests. Same-file occurrences beyond the indexed declaration count as conservative
-  production-use evidence.
-- Exact positive point-query results are now revision/config fingerprint checked and consumed by
-  `find_dead_code`. If `inspect_symbol` found a reference, the symbol cannot remain in the dead queue.
-- Complete exact zero-reference point results can still raise internal candidates to strong static
-  evidence. Partial, stale, malformed, or configuration-drifted cache entries fail closed.
-
-These remain review candidates. Static absence never authorizes automatic deletion.
-
-## Python manifest ownership
-
-Python dependency collection now discovers nested `requirements*.txt`, `requirements/*.txt`,
-`pyproject.toml`, and `Pipfile` manifests. Each import is judged against its nearest ancestor Python
-manifest. A nested service therefore sees its own declared dependencies, while unrelated sibling code
-cannot inherit them accidentally.
-
-The conventional root filename `test.py` is now classified as test code by both path classification
-and dependency severity logic.
-
-## Endpoint false-positive guards
-
-Endpoint extraction masks line and block comments while preserving source offsets. Commented-out
-Express/Hono/Go/Rust/Java-style routes no longer enter the inventory.
-
-Direct object routes also require an executable handler value. Primitive path maps such as
-`{'/.codex': 'claude'}` are configuration data, not `ANY /.codex` endpoints.
-
-## Rust graph metadata
-
-Rust functions, methods, structs, enums, traits, types, modules, constants, statics, macros, and unions
-now carry concrete `symbol_kind` values. Impl/trait functions retain `member_of`, visibility, selection
-ranges and structural owner/member edges; public module declarations retain exported state.
-
-This improves graph navigation and dead-code classification but remains tree-sitter parser evidence.
-0.2.8 does not bundle rust-analyzer and does not claim exact Rust references.
-
-## Mixed-language retrieval and compact proof
-
-`query_graph` and workflows that reuse its seed ranking constrain explicit Rust, Python, TypeScript,
-JavaScript, Go, Java, or C# questions to matching source extensions. Multiple explicitly named
-languages form a union; exact `seed_files` continue to be the strongest pinning mechanism.
-
-Compact `verified_change` output now lists each selected symbol's exact/bounded reference occurrence
-count, referenced-file count, inbound-container count, and up to three inbound names. The short form
-therefore cannot hide that a supposedly unused symbol has a known caller.
-
-## Scope and remaining competitor gaps
-
-The local engine still has no vector embedding search, runtime trace ingestion, clone-to-ADR layer,
-Python/Rust/Java LSP integration, whole-program CFG, value propagation, or taint engine. Those are
-separate precision projects, not claims attached to this patch release. Independent end-to-end
-competitor scores also remain missing until collected under the blind benchmark protocol.
-
-## Verification
-
-- Full Node test suite: 487 tests, 484 passed, 3 platform skips, 0 failed.
-- Deterministic language/cross-repository/lifecycle benchmark: `PASS`.
-- Real pinned corpus: 6 of 6 repositories `PASS` across TypeScript, JavaScript, Python, Go, Java,
-  and Rust.
-- Agent routing microbenchmark: 3 of 3 expected symbols, 0 false positives. Independent competitor
-  comparison remains `INCOMPLETE` because no blind same-task result was supplied.
-- npm package dry-run succeeds for `weavatrix@0.2.8`; the portable MCPB validates, initializes its
-  staged TypeScript precision provider, passes the repository-plugin execution guard, and packs.
-- Direct dogfood checks confirm the original regressions: local `USER_HEADER` is not dead/test-only;
-  nested `autobot/requirements.txt` covers `slack_bolt`; commented `DELETE /:id` and primitive
-  `ANY /.codex` are absent; explicit Rust retrieval returns only `.rs` seeds.
-
-## Tool catalog
-
-0.2.8 exposes the same 36 MCP tools as 0.2.7. The default offline profile exposes 33; pinned exposes
-30. Network tools remain absent from offline and pinned profiles.